package.json: Mark project as private